$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd560e7b-e988-4a85-8de6-72347e53a7b1.roa File: cd560e7b-e988-4a85-8de6-72347e53a7b1.roa (raw, json) Hash identifier: +i+dwiFrQkFslJAlzh06jEw9n7iiVyLJCqcsIYTQ6Ro= Subject key identifier: F3:CB:D0:3D:A9:6E:75:E2:62:E6:F8:4D:F3:F6:2F:4A:EE:F0:B5:01 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3429EABF31C1E3631981EEBD037EBDE152AB6268 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd560e7b-e988-4a85-8de6-72347e53a7b1.roa Signing time: Fri 04 Sep 2026 18:13:27 +0000 ROA not before: Fri 04 Sep 2026 18:13:27 +0000 ROA not after: Thu 03 Dec 2026 23:59:59 +0000 asID: 214101 IP address blocks: 130.176.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:29:ea:bf:31:c1:e3:63:19:81:ee:bd:03:7e:bd:e1:52:ab:62:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 4 18:13:27 2026 GMT Not After : Dec 3 23:59:59 2026 GMT Subject: serialNumber=85b42126c89e308f51f38a5efc2b7219a225d814973d5aa34d31a44f1f02d6f1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:be:49:4a:3c:73:3b:6e:00:7a:bc:86:f1:c6: 30:17:d9:9f:6e:df:7e:7d:b3:38:cc:9a:21:0a:e0: 73:d4:74:ed:d5:3e:af:e4:73:95:80:87:31:27:01: 7f:23:23:cb:81:74:03:a5:63:18:34:54:1f:7b:94: aa:ea:39:cb:b5:51:5f:5d:8d:c7:6f:83:ed:98:59: 8d:b1:b9:e1:de:f0:25:51:b3:ac:6f:8e:bf:6a:a9: f7:fc:7b:4e:70:0c:e8:c2:10:dc:8c:ee:8a:9b:72: d4:95:a7:4d:67:0e:30:da:5c:bd:56:31:7e:19:73: 15:63:33:36:08:d0:fa:80:83:ce:1c:65:23:9e:52: ed:53:52:e2:fe:ac:ee:37:fe:42:28:b5:48:98:61: ba:b2:45:8d:9e:56:14:b9:9b:a4:9e:8f:9d:ad:c9: 44:12:53:2b:26:11:97:38:56:ff:51:ed:b7:98:47: 56:57:bb:ef:b8:31:2a:03:5b:1c:e9:df:09:1b:1a: 4f:52:7e:2c:b1:34:49:2e:1a:2d:48:7f:13:58:e5: 1e:ce:ab:30:ed:49:d1:21:d5:bf:35:96:9a:bd:61: 27:d5:14:8f:1c:d9:ee:77:87:1e:db:bb:a3:38:e7: ea:ce:0b:b6:c4:60:4a:4e:62:93:29:aa:48:3d:63: bc:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:CB:D0:3D:A9:6E:75:E2:62:E6:F8:4D:F3:F6:2F:4A:EE:F0:B5:01 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd560e7b-e988-4a85-8de6-72347e53a7b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.47.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:e7:08:c6:82:d3:bc:88:8c:b9:f7:7c:a6:b7:9a:97:b9:33: 11:f4:0f:eb:36:e0:18:e8:90:34:2f:8a:57:60:f1:b2:2b:70: d5:d3:78:39:f4:79:cb:32:1c:58:16:b7:71:96:97:c9:2b:b0: 25:71:5f:4a:a9:78:f4:a6:e7:68:bd:75:84:e9:6b:d4:e1:7f: a7:13:32:8b:f7:5e:73:50:93:52:c2:24:62:2c:c3:64:f4:a3: 1b:ca:52:4b:02:21:9d:9d:58:2c:b0:8c:87:7e:b0:c5:69:3e: 32:8d:07:e5:8d:34:9e:36:2a:17:b8:35:ec:bc:14:3e:ae:ed: 85:c0:db:9b:71:cc:7e:89:88:ab:e4:17:18:aa:28:28:5c:5e: 21:1e:f5:f0:c4:aa:88:3f:19:c1:52:5d:af:22:91:89:98:7b: 33:ab:ee:ac:45:38:a2:ac:5d:28:24:d7:91:72:ca:39:d2:ad: 3f:8d:ee:dc:86:ab:9c:64:d2:b8:26:74:07:9f:96:50:d1:90: 09:3a:de:5c:4f:23:42:ca:4b:d7:9a:05:34:52:c3:03:71:01: c8:22:59:1d:8a:b3:bf:d9:bd:fe:27:6e:3f:81:7c:4d:77:8e: 42:1d:35:f9:37:d2:95:42:b9:7e:d3:86:22:51:d3:3b:5a:fc: e6:5f:ed:35 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNCnqvzHB42MZge69A3694VKrYmgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwOTA0MTgxMzI3WhcNMjYxMjAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NWI0MjEyNmM4OWUzMDhmNTFmMzhhNWVmYzJiNzIxOWEy MjVkODE0OTczZDVhYTM0ZDMxYTQ0ZjFmMDJkNmYxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCevklKPHM7bgB6vIbxxjAX2Z9u3359szjMmiEK4HPUdO3V Pq/kc5WAhzEnAX8jI8uBdAOlYxg0VB97lKrqOcu1UV9djcdvg+2YWY2xueHe8CVR s6xvjr9qqff8e05wDOjCENyM7oqbctSVp01nDjDaXL1WMX4ZcxVjMzYI0PqAg84c ZSOeUu1TUuL+rO43/kIotUiYYbqyRY2eVhS5m6Sej52tyUQSUysmEZc4Vv9R7beY R1ZXu++4MSoDWxzp3wkbGk9SfiyxNEkuGi1IfxNY5R7OqzDtSdEh1b81lpq9YSfV FI8c2e53hx7bu6M45+rOC7bEYEpOYpMpqkg9Y7z9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU88vQPaludeJi5vhN8/YvSu7wtQEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NkNTYwZTdiLWU5ODgtNGE4NS04ZGU2LTcyMzQ3ZTUzYTdiMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACCsC8wDQYJKoZIhvcNAQELBQADggEBABznCMaC07yIjLn3fKa3mpe5MxH0 D+s24BjokDQvildg8bIrcNXTeDn0ecsyHFgWt3GWl8krsCVxX0qpePSm52i9dYTp a9Thf6cTMov3XnNQk1LCJGIsw2T0oxvKUksCIZ2dWCywjId+sMVpPjKNB+WNNJ42 Khe4Ney8FD6u7YXA25txzH6JiKvkFxiqKChcXiEe9fDEqog/GcFSXa8ikYmYezOr 7qxFOKKsXSgk15FyyjnSrT+N7tyGq5xk0rgmdAefllDRkAk63lxPI0LKS9eaBTRS wwNxAcgiWR2Ks7/Zvf4nbj+BfE13jkIdNfk30pVCuX7ThiJR0zta/OZf7TU= -----END CERTIFICATE-----Generated at Mon Sep 21 05:04:59 2026 by rpki-client